Privacy

How we use your information.

To send help where it's needed, EndureNC has to know a little about the people who help. This page says what EndureNC keeps, who can see it, and when we delete it. EndureNC is run by a small volunteer team.

Last updated October 26, 2026

What we keep

It depends on how you use EndureNC.

When you sign up to help

Your name, email and phone number. If you tell us: the group you're with, where you're based and where you could help, what you can do, when you're free and the days you aren't, whether you can drive and what you drive, and any notes you write. If you came through an ambassador's link, we note whose, so they can see how many people they brought in. Which version of the Terms of Use you agreed to, and when.

When you sign up a supply site or a group

Its name, its address or area, its hours, and what kind of group it is. And the name, email and phone number of the person to contact.

Your account

Your name, your email, and a scrambled copy of your password. We can't read your password. Which relief efforts you are part of and your job in each, and when you were last using EndureNC, so admins can see who is around. Which version of the Terms of Use you agreed to, and when.

What you do in the app

The jobs you accept, start and finish, with the times. Counts and notes you add, like supplies at a site. Private notes you send to dispatch.

When you write to us

What you write in the contact form and what it's about. Your name and a way to reach you, only if you give them. We use them only to answer you.

Behind the scenes

A sign-in record for each phone you sign in on, for 30 days. Wrong password tries, counted for about a day, so nobody can keep guessing. On the sign-up and contact forms, and when the app reports an error, the network address you send from, scrambled so it can't be turned back into an address, kept for about a day and used only to stop floods of fake forms and reports.

What we don't collect

We don't track where you are. EndureNC never asks for your phone's location, camera, photos or contacts. We don't use ad or tracking tools.

Who can see it

Each person sees only what their job needs. Our servers enforce this on every download, so it doesn't depend on what the screens choose to show.

Dispatch and admins: They run a relief effort. They read applications and volunteer profiles, including phone numbers and emails, so they can call you, check, and send you where you're needed.
Supply sites: A site's manager and team see their own site, and the names of the volunteers sent there. They don't see volunteers' phone numbers or emails.
Groups: The members of an organization see the work given to their group. A supply site's address and phone number go to a group only after dispatch confirms the job, about a minute later so a wrong tap can be undone. The site's manager can choose to share sooner. Groups that dispatch makes partners can see every supply site, address and phone included.
Volunteers: You see your own profile, and the jobs you're given with where to go and who to ask. Not other volunteers' details.
Ambassadors: They see how many people came through their own sign-up link. They don't see who.
EndureNC's own team: In the app, they see numbers about how each relief effort is going, and the names and emails of its admins. They don't see a relief effort's records: the people, addresses and phone numbers in it. The team can also step in on one person's account, for example when they can't get in: give a code to set a new password, turn it off or back on, or move it to a new email. Each time, every relief effort that person is part of keeps a note of what was done, and its admins can read it. To see an effort's records, a team member has to be invited in like anyone else, and its admins see that too. The team also reads what people send through the contact form.
The people who run the servers: The owners of the hosting accounts can open the database to keep it working. That access is limited to them.
Everyone else: Nothing. There is no public board, no directory and no search for people.
When the law requires it: We may share information if the law requires it, like a court order, and only what is required.

What we use it for

To match people who want to help with places that need it, and to send you where you're needed.
To call you and check, before we send you a code to join.
To send you codes, and the morning briefing if you turn it on.
To count how things are going, in numbers that have no names, so we can see what works.

We don't sell your information or rent it out. We don't use it for ads, and we don't use it to build a profile of you.

How long we keep it

Applications: 30 days after the team decides on one. An application nobody ever looks at is deleted after 90 days. If you join, your answers become your volunteer profile in that relief effort.
A relief effort's records: Names, phone numbers, addresses, jobs and notes stay while the effort is running. When it ends, there is a short wind-down, usually 14 days, so phones that were offline can send their last changes. Then it closes. For 90 days only its admins can read it, so they can save a copy. After that it is all deleted from our servers.
What stays after that: Daily numbers, and an outline of what happened. They have no names, notes, contacts or places. Only kinds of things, statuses, counts and times.
Your phone's copy: When an effort closes, your phone deletes its records. If you are taken out of an effort, your phone clears it too, but keeps changes it hadn't sent for 14 days, in case you're let back in.
Your account: Kept while you are part of a relief effort. After the last effort you were in has been deleted, the app asks: “Keep me on the roster for future relief efforts?” If you say yes, we keep your name and email until you ask us to delete them. If you say no, or don't answer, the app tells you, and we delete your account 30 days later.
Sign-ins and codes: A sign-in lasts 30 days. An emailed code works for 15 minutes. A password reset code works for one day.
Morning email records: Whether a morning email went to you is noted so the team can see who got it. That note is deleted after 90 days.
Messages to us: What you send through the contact form is deleted after 90 days, or sooner if we delete it first.
Error reports: When the app breaks, it sends a short report of what broke, with the page, the app version and the kind of browser, but no names, emails, phone numbers or records, and we delete it 30 days after we last see that error.
Backups: We keep backup copies of the database so we can recover from a mistake. Each one is deleted within 14 days. So something we delete can stay in a backup for up to 14 days more, and then it is gone.

Keeping it safe

We use reasonable safeguards to protect your information. Passwords are scrambled so they can't be read. Sign-ins run out. Each phone gets only what its person's job lets them see, and our servers check that on every download. EndureNC's own team signs in with a second step, a code from an app on their phone.

But no system is perfectly safe. We can't promise that information will never be lost, or seen or changed by someone who shouldn't. Keep your password to yourself, and sign out on any phone that isn't yours.

On your phone

No tracking cookies. We don't use cookies for ads or tracking. Your sign-in is kept in the app's own storage on your phone, not in a cookie.
A copy of your work, so it runs without signal. The app keeps what your job lets you see in your browser's storage. If someone else signs in on the same phone, your copy is cleared first.
Small settings. Light or dark, the last supply site you checked in at, and which hints you've closed.
The app and its maps, saved so they open offline.

You can clear all of this in your browser's settings. You will have to sign in again, and any changes your phone hadn't sent yet will be lost.

Email

EndureNC sends a few emails: a code to check your email address, notices when an account's email changes, the code you join with once you're approved, and the morning briefing if you turn it on. Briefings leave out people's names, phone numbers and addresses. Some relief efforts may still give codes by phone or text instead.

When EndureNC sends email, it goes through Resend, a company that delivers email. Resend sees your email address and the message.

Companies that help

Convex stores the information EndureNC keeps.
Vercel hosts the website and the app. Like any website host, it sees the address a visit comes from.
Resend delivers email, when email is on.

We use them to run EndureNC. We don't send your information to anyone else, unless the law requires it.

For adults only

You have to be 18 or older to apply or to have an account. EndureNC isn't meant for children, and we don't knowingly let anyone under 18 apply or have an account. If we learn that someone under 18 has applied or made an account, we remove it.

Your choices

On My profile in the app you can change your name and email, turn the morning email off, sign out of your other devices, and answer the roster question.

You can ask us for a copy of what we have about you, or ask us to delete it. Tell us your name, the email you signed up with, and the relief effort you helped with. We will make sure it's really you first, which may mean calling the number we have.

If you ask us to delete your information, we delete your account and any application of yours. What a relief effort recorded while you were part of it, like your volunteer profile and the jobs you did, is kept together with that effort. It is deleted when the effort's records are, on the schedule above. We keep it together so the history stays right while the work is going on.

To ask, use the contact form and choose “A privacy request”. Or tell an admin in your relief effort, who can pass it to us.

If we change this page, we change the date at the top.